Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: FWU4GNiV3nmePrmUTxdr47WJJTJgmLYYOuLY6/Iw6T8=
Subject key identifier: 3F:0E:39:D9:E2:67:B0:20:AD:D0:77:9E:5C:5D:46:82:40:09:8A:C2
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019CACB4AB993EAAACACB245211E232D907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0E33
Signing time: Mon 02 Mar 2026 04:00:47 +0000
Manifest this update: Mon 02 Mar 2026 04:00:47 +0000
Manifest next update: Tue 03 Mar 2026 04:00:47 +0000
Files and hashes: 1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: SyQW7GsbBD/y+vLLvPm+BzPG2XnMTsi6/5R+Sk8r8Ac=)
2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ab:99:3e:aa:ac:ac:b2:45:21:1e:23:2d:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Mar 2 04:00:47 2026 GMT
Not After : Mar 3 04:00:47 2026 GMT
Subject: CN=3f0e39d9e267b020add0779e5c5d468240098ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:20:56:2c:cb:a8:33:b0:c6:4f:91:f7:6e:
63:36:74:33:8c:d5:3c:63:e8:35:d0:1f:8d:61:61:
19:62:9f:60:99:13:b8:1c:1c:42:f0:e3:cd:d2:03:
be:6a:97:e0:5f:02:e7:84:58:da:24:92:9f:6e:74:
3c:a8:37:89:0f:27:8e:b7:d2:bd:24:0f:0f:de:23:
bb:50:dc:58:49:6b:b6:56:6e:90:60:68:72:88:98:
7f:be:12:89:59:ba:d9:0d:8c:1b:db:06:94:d6:65:
f9:af:dd:ae:41:eb:31:e0:b9:85:bd:5a:02:0b:db:
87:4d:4b:1e:e7:88:36:9a:3c:12:ba:b3:a8:ea:ea:
fa:34:31:72:73:65:df:f1:da:e8:9a:63:68:ec:58:
98:83:c6:46:3f:0c:38:7a:89:aa:41:2f:98:cf:44:
44:1f:70:aa:c8:0c:02:35:32:f3:e3:d7:10:72:c5:
90:5e:5e:30:7e:54:17:d6:c8:c8:89:be:e6:81:0d:
18:42:8e:53:52:f0:f5:7d:06:3c:33:47:17:a0:a6:
b4:19:70:f4:9c:9a:b9:f7:96:55:99:6b:35:6b:6b:
31:42:6b:66:93:d1:de:7a:3e:6e:50:1b:f5:88:83:
53:e6:96:c5:aa:08:7c:c3:28:c9:0b:81:af:83:0f:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:39:D9:E2:67:B0:20:AD:D0:77:9E:5C:5D:46:82:40:09:8A:C2
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:69:b5:e2:0f:32:e6:74:77:3a:fe:04:5b:df:6d:e3:83:
94:e9:1f:30:7a:b6:c4:cc:ab:e1:10:1c:69:6f:07:53:de:02:
d2:c2:91:a2:d3:bc:be:47:5f:4b:be:62:ff:a1:50:d9:6e:c2:
60:58:c8:4d:0d:1d:ae:1b:22:61:ae:2d:a0:6e:d8:72:59:1a:
48:97:b1:2d:ea:2e:9e:c9:11:a2:5a:85:b0:33:38:6f:55:eb:
fb:c2:69:9c:4f:08:64:c4:01:f2:4b:c4:ce:6c:e7:18:21:6b:
3f:1b:e3:e5:4a:35:a6:98:17:65:dc:73:18:3d:92:24:30:67:
1c:d1:a1:11:60:05:e2:71:26:90:0a:20:a8:b2:b4:f5:8a:30:
a4:a6:3f:9f:21:d6:51:27:d8:26:f3:76:bf:24:92:56:f6:3d:
69:9d:b6:85:64:13:ff:a9:03:fe:9e:a6:c1:a8:84:d9:c6:90:
27:fb:9a:fa:7b:ae:29:30:42:15:59:73:9d:7d:1b:21:db:2b:
8d:bb:66:19:bb:4b:5f:c1:e7:04:b0:a6:d3:6e:e7:f9:03:b0:
e9:30:7c:df:83:9a:42:3a:d1:95:94:6c:be:85:31:f6:b0:3b:
70:aa:c2:8e:4e:ae:76:1f:ea:78:c8:46:89:a7:1b:23:93:db:
d0:fd:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:27 2026 by rpki-client